Logistics Privacy Protection Scheme Based On Blockchain And Attribute-Based Encryption

The logistics industry is an indispensable part of modern economy,responsible for crucial tasks such as product transportation,warehouse management,and supply chain coordination.While express delivery has improved efficiency and convenience in daily life,there are also certain security risks associated with logistics information.During the process of package sending and transit,logistics information is still vulnerable to the following threats:(1)Logistics information privacy is difficult to ensure.Some logistics companies lack awareness of information security and protective measures,leading to information leakage and attacks.(2)A large number of logistics workers are of mixed quality,making security management difficult.Access control for internal employees of logistics companies is challenging to implement.(3)Customer identity authentication is challenging to complete.Malicious customers may falsely impersonate their identity in order to obtain packages.(4)The difficulty of regulating and tracing logistics transaction information is high.The logistics chain contains vast amounts of logistics transaction information,and in case of package disputes,it is challenging to trace logistics information.This thesis proposes a blockchain-based logistics user identity information management solution and a blockchain and attribute-based encryption-based privacy data access solution from the perspectives of logistics user information management and logistics information access control.(1)Using blockchain for user information registration,authentication,and revocation,the security of user information is protected,and the security of the proposed solutions is proven through security analysis.(2)Improved attribute-based encryption is used to achieve fine-grained access control of privacy data,and blockchain technology is adopted to ensure the traceability of privacy data access records.(3)Linear secret sharing schemes and bilinear pairing are used to protect the sender’s identity data by ensuring the security of access policies.(4)The idea of multi-authority attribute-based encryption(MA-ABE)is utilized to effectively prevent internal members of the logistics system from accessing user information beyond their authorization.Security analysis shows that the proposed solutions are secure under the assumption of bilinear Decision Diffie-Hellman.This paper presents a system design and implementation based on the proposed access control for privacy protection in logistics.The system is developed using the Solidity language for writing Ethereum blockchain smart contracts and the Truffle framework for development.Different encryption methods are adopted for data integrity checking in the data access layer and the application logic layer.Finally,performance testing of the system is carried out on the Ethereum platform,and the results demonstrate the feasibility of the system.